Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: IkgGwUSVxK+p3kuyv3b5JK10sOXZQyTh7clZAIgrP+A=
Subject key identifier: B6:B1:48:4F:EE:7E:4B:CD:31:DC:39:71:A9:A0:E6:A6:4D:CE:C0:45
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 0198D439BEB258BBA5AA8F345972ECB376FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 03E3
Signing time: Sat 23 Aug 2025 00:00:10 +0000
Manifest this update: Sat 23 Aug 2025 00:00:10 +0000
Manifest next update: Sun 24 Aug 2025 00:00:10 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: TvEkbwZCtiDMDPynp6wy2daPG_8.roa (hash: 6+0k1c0jemPs8iK4NO+2VO17+OLAQGxnnHN1+3jUmGw=)
3: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: jqBUEsqz6Z0A1FjBGOxrTbIaM46zPaPYEaHaqehx6vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:be:b2:58:bb:a5:aa:8f:34:59:72:ec:b3:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Aug 23 00:00:10 2025 GMT
Not After : Aug 24 00:00:10 2025 GMT
Subject: CN=b6b1484fee7e4bcd31dc3971a9a0e6a64dcec045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8b:7c:ca:d2:a7:c6:28:31:85:8f:09:07:d4:
65:40:f4:6a:94:5d:e8:42:94:24:ae:2f:8f:6e:ce:
d0:23:38:3e:34:58:f1:e9:28:ee:d5:4a:13:cd:cc:
35:e8:a1:36:01:61:8c:43:bc:91:0f:01:78:5c:53:
f2:e9:b3:26:3f:10:7d:89:48:8a:49:13:28:88:ba:
c6:17:67:d3:98:dc:6f:81:56:bf:14:d6:ec:08:f0:
8e:1e:85:9d:22:a8:07:19:a4:2e:f7:cc:0f:62:2a:
09:4d:96:1c:cd:e5:38:02:ee:e0:1b:75:29:67:1f:
f6:c9:f7:93:3d:16:58:c8:8f:d5:8e:a3:0a:37:70:
23:b0:7d:e7:3a:a1:cd:3c:60:ed:97:b7:19:0a:fe:
90:50:3f:93:b0:18:0f:d9:7d:4a:98:d2:fb:a6:76:
b2:c6:a4:9a:e8:d9:16:49:63:02:dc:9e:1e:9c:f8:
24:18:07:54:fa:71:00:fc:c8:90:a4:10:63:e3:dc:
c3:25:b6:59:64:90:1b:70:6d:cf:e4:ff:07:09:16:
ac:0d:de:99:1a:42:9f:3e:fd:44:61:38:c7:64:57:
de:40:be:e2:ca:1e:c7:67:68:0a:1c:e7:2c:41:d1:
70:d9:c4:e2:f3:ef:0c:80:90:c9:57:1a:21:cc:87:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:48:4F:EE:7E:4B:CD:31:DC:39:71:A9:A0:E6:A6:4D:CE:C0:45
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:65:e4:97:7a:61:7e:3f:1d:77:8a:13:72:41:9d:6e:61:95:
b5:81:62:e2:5a:48:b8:0a:1a:99:9a:bc:ac:71:30:fb:97:20:
07:a2:3f:42:92:a1:64:33:3e:a5:6b:9c:ec:ad:ab:7f:ef:11:
ef:55:ac:d5:eb:7b:e2:39:29:64:0f:07:36:9f:62:20:c3:70:
56:9d:75:61:00:12:3a:23:c5:4e:25:1a:97:42:69:ba:6b:b4:
81:56:4c:6d:dc:46:b9:c1:50:c6:ed:09:9e:8e:5d:e9:04:54:
e8:fd:b5:43:55:2f:ba:8b:a6:83:7b:10:c1:4a:cd:f3:74:6d:
dd:6c:66:72:c1:ae:a3:61:5f:b1:7c:7a:69:85:bf:17:9d:c8:
90:ec:6a:4e:e0:7a:86:40:98:68:09:12:99:a4:02:d8:e5:94:
c8:32:79:8a:c7:61:3c:fb:5d:d9:d7:cd:b1:94:3e:18:72:23:
1d:66:98:62:8a:29:91:2b:b8:a9:e5:a0:0c:e7:96:c5:e4:b2:
ab:21:1c:54:29:aa:ff:6b:12:4c:72:e9:1d:f3:a6:9a:c0:c7:
2f:01:ca:1b:4a:93:22:58:a5:b0:1e:64:05:98:8e:be:d4:88:
82:9b:84:92:1a:f5:35:d3:8a:9c:9a:c5:3b:79:82:37:69:a7:
d9:f5:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:36 2025 by rpki-client